diff --git a/Cargo.lock b/Cargo.lock
index 0c38c6ba..3e67c582 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -500,9 +500,9 @@ dependencies = [
 
 [[package]]
 name = "serde_json"
-version = "1.0.128"
+version = "1.0.129"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ff5456707a1de34e7e37f2a6fd3d3f808c318259cbd01ab6377795054b483d8"
+checksum = "6dbcf9b78a125ee667ae19388837dd12294b858d101fdd393cb9d5501ef09eb2"
 dependencies = [
  "itoa",
  "memchr",
diff --git a/sarif-fmt/Cargo.toml b/sarif-fmt/Cargo.toml
index 69a5f99b..5cee00a3 100644
--- a/sarif-fmt/Cargo.toml
+++ b/sarif-fmt/Cargo.toml
@@ -23,7 +23,7 @@ path = "src/bin.rs"
 anyhow = "1.0.89"
 codespan-reporting = "0.11.1"
 serde-sarif = { path = "../serde-sarif", version = "0.6.6" }
-serde_json = "1.0.128"
+serde_json = "1.0.129"
 clap = { version = "4.5.20", features = ["derive"] }
 
 [dev-dependencies]
diff --git a/serde-sarif/Cargo.toml b/serde-sarif/Cargo.toml
index 98f10f8c..28bbde1d 100644
--- a/serde-sarif/Cargo.toml
+++ b/serde-sarif/Cargo.toml
@@ -31,7 +31,7 @@ anyhow = { version = "1.0.89", optional = true }
 cargo_metadata = { version = "0.18.1", optional = true }
 regex =  { version = "1.11.0", optional = true }
 serde = "1.0.210"
-serde_json = "1.0.128"
+serde_json = "1.0.129"
 strum = "0.26"
 strum_macros = "0.26"
 thiserror = "1.0.64"
@@ -46,5 +46,5 @@ prettyplease = "0.2.22"
 proc-macro2 = "1.0.88"
 quote = "1.0.37"
 schemafy_lib = "0.6.0"
-serde_json = "1.0.128"
+serde_json = "1.0.129"
 syn = "2.0.79"